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REMARKS 

In view of the following discussion, the Applicants submit that none of the claims 
now pending in the application Is obvious under the provisions of 35 U.S.C. §103. 
Thus, the Applicants believe that all of these claims are in allowable fonn. 

I, REJECTION OF CLAIMS 1-64 UNDER 35 U.S.C, S 103 

Claims 1-64 stand rejected as being unpatentable over the Aganwal et al. 
application (U.S. Patent Application Publication No. 2004/0179486, published 
September 16, 2004. hereinafter referred to as "Agarwal") in view of the Banerjee 
application (U.S. Patent Application Publication No. 2002/0147722. published October 
10, 2002, hereinafter referred to as "Banerjee"). The Applicants respectfully traverse 
the rejection. 

In particular, the Applicants submit that Aganwal and Banenee, singly or in any 
permissible combination, ^il to teach, show or suggest the novel invention of examining 
the bodv substring of a datagram to detemnlne, based on the contents of the bodv 
substring, whether the substring matches a substring of interest, as recited in the 
Applicants' independent claims 1. 26, and 51. 

By contrast, Aganval merely teaches a method for reconstructing segmented 
packets transmitted over a network using header information {e.g., sequence numbers, 
source information, and destination infomiation). In other words, the system taught by 
Agarwal is unconcerned with the bodv (/.e., data contents) of the packet segments, as It 
is not needed to determine the order of the packet segments. For Instance, the portion 
of Agarwal that that Examiner cites to support the teaching of "applying an automaton 
... having a list of substrings of interest to content of said substring to detennrne 
whether said substring matches one of said substrings of interest" at most teaches the 
use of bits in a packet header to indicate whether a received segment is a first (F bit) or 
last (L bit) segment in a segmented packet. 

The Examiner acknowledges in the Office Action that Agarwal "fails to specifically 
disclose having a datagram comprise a body substring and a header and applying an 
automation [sicj having a list of substrings of interest to the body substring of said 

10 



PAGE 13/16 ' RCVD AT 7/1 1/2008 5:49:03 PM [Eastern DayUght Time] * SVR:USPTO-EFXRF-6/10 ' DNIS:2738300 ' CSIO:732 530 9808 * DURATION (mm-ss):03-22 



07/11/2008 16:50 FAX 732 530 9808 



PATTERSON & SHERIDAN -» PTO 



@|014/016 



10/800.890 

datagram to determine whether said substring matches one of said substring of interesf 
(Office Action, Page 3). The Examiner submits, however, that this feature is taught by 
Banerjee. The Applicants respectfully disagree. 

Banetjee, like Aganwal, teaches a method for reassembling fragmented 
datagrams that uses information in the headers of dataaram fragments in order to 
determine how to reassemble the fragments. In other words, the system taught by 
Banerjee is also unconcerned with the body (i.e., data contents) of the datagram 
fragments, as It is not needed to determine the manner of reassembly. For instance, 
the portion of Banneqee that that Examiner cites to support the teaching of "applying an 
automaton ... having a list of substrings of interest to content of said substring to 
detemiine whether said substring matches one of said substrings of interest" at most 
teaches that a reassembly queue for a datagram fragment "is selected by hashing the 
ipjd (i.e., the datagram ID) aPDearina in the fragment's header ...» (Banerjee, 
paragraph 0024. emphasis added). Thus, the "ip__id" does not "represent[ 1 the body 
substring of [the] datagram." (Office Action, Page 4) as the Examiner suggests, but is 
rather a part of the datagram's header Baneqee therefore suffers from the same 
deficiency as Aganwal. 

Notably, Applicants' invention positively claims the step of applying an automaton 
having a list of substrings of interest to the body substring of a datagram , in order to 
detemnine whether the received substring matches a substring of interest, as claimed in 
Applicants' independent claims 1, 26 and 51. Examining the body substring of the 
received datagram for data content facilitates a variety of data analysis techniques, 
including intrusion detection, packet filtering, load balancing, routing, and other network 
related operations that make decisions based on the contents of substrings. 
Specifically. Applicants' claims 1 . 26 and 51 positively recite: 

1 . A method for detecting a substring of interest from a plurality of datagrams 
that arrives out-of-order, comprising: 

receiving a datagram, the datagram comprising a body substring and a 
header with an index; 

detemiining whether a preceding span exists in a span set; 

detennining whether a succeeding span exists in said span set; and 

applying an automa ton having a list of substrings of interest to the body 
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substring of said dat agram to determine whether said body substring matches 
one of said substrings of interest . (Emphasis added) 



26. An apparatus for detecting a substring of interest from a plurality of 
datagrams that arrives out-of-order, comprising: 

means for receiving a datagram, the datagram comprising a body 
substring and a header with an index; 

means for determining whether a preceding span exists in a span set; 

means for detenninlng whether a succeeding span exists In said span set; 

and 

means for aoplvino an auto maton having a list of substrings of interest to 
the body substring of said datagram to detennine whether said body substring 
matches o ne of said substrings of interest . (Emphasis added) 



51. A computer-readable medium having stored thereon a plurality of 
Instnjctions, the plurality of instructions Including instructions which, when 
executed by a processor, cause the processor to perform the steps of a method 
for detecting a substring of Interest from a plurality of datagrams that arrives out- 
of-order, comprising of: 

receiving a datagram, the datagram comprising a body substring and a 
header with an index; 

detemrjining whether a preceding span exists in a span set; 

detennining whether a succeeding span exists In said span set; and 

applying an automaton ha ving a list of substrings of Interest to the body 
substring of said data gram to determine whether said body substring matches 
one of said substrings of interest . (Emphasis added) 



As discussed above, the systems of Agarwal and Banerjee are completely 
devoid of any teaching or even suggestion relating to the desirability of examining the 
hody of a dgta p?pket (or segment thereof). Thus, the Applicants respectfully submit 
that claims 1, 26 and 51 fully satisfy the requirements of 35 U.S.C. §103 and are 
patentable thereunder. 

Claims 2-25, 27-50, and 52-64 depend from independent claims 1, 26, and 61 
and recite additional features. As such, and for at least the same reasons stated above 
with respect to claims 1, 26, and 51, the Applicants respectfully submit that claims 2-25, 
27-50. and 52-64 also fully satisfy the requirements of 35 U.S.C. §103 and are 
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patentable thereunder. 
Ill, CONCLUSION 

Thus, the Applicants submit that all of the presented claims fully satisfy the 
requirements of 35 U.S.C. §103. Consequently, the Applicants believe that all these 
claims are presently in condition for allowance. Accordingly, both reconsideration of this 
application and its swift passage to issue are eamestly solicited. 

If, however, the Examiner believes that there are any unresolved issues requiring 
the issuance of a final action in any of the claims now pending in the application, it is 
requested that the Examiner telephone Mr Kin-Wah Tono. Esq. at (732) 530-9404 so 
that appropriate arrangements can be made for resolving such issues as expeditiously 
as possible. 



Respectfully submitted, 




Date 



Kin-Wah Tong, Attorney 
Reg. No. 39,400 
(732) 530-9404 



Patterson & Sheridan. LLP 
595 Shrewsbury Avenue 
Shrewsbury. New Jersey 07702 
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